Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward new-product research prompt that uses web search to summarize public product information, with no code, persistence, credential access, or local system changes.
Install this if you want Chinese-language briefs on recent product launches using public web sources. Review the cited or named sources before making business, investment, or procurement decisions, and avoid including confidential strategy details in prompts because the workflow is designed to perform external searches.
The trigger description is broad enough to overlap with many generic analysis and summarization requests, which can cause the skill to activate outside its intended scope. That increases the chance of unintended network access and externally sourced output being injected into unrelated user workflows without clear user intent.
The skill instructs the agent to perform web searches across third-party sources and generate conclusions from them, but it does not clearly tell the user that external sources will be accessed. This creates a transparency and consent issue and raises the risk of users receiving unvetted external information or having their query context sent to third-party services unexpectedly.
整个技能文档从名称字段到输出示例均默认并强制使用中文，没有说明是否支持其他语言，也未提供用户可选语言/locale 的机制。根据规则，未经用户选择而强制特定语言属于自然语言层面的组织策略风险。
